HP VPN Firewall Appliances NAT and ALG Configuration Guide

20
Figure 21 Configuring dynamic NAT
Internal server configuration example
Network requirements
As illustrated in Figure 22, a company provides two Web servers and one FTP server for external users
to access. The internal network address is 10.110.0.0/16. The internal address for the FTP server is
10.110.10.3/16, for the Web server 1 is 10.110.10.1/16, and for the Web server 2 is 10.110.10.2/16. The
company has three public IP addresses from 202.38.1.1/24 through 202.38.1.3/24. Specifically, the
company has the following requirements:
• External hosts can access internal servers using public address 202.38.1.1/24.
• Port 8080 is used for Web server 2.
Figure 22 Network diagram
Configuring Firewall
1. Configure the FTP server:
a. From the navigation tree, select Firewall > NAT Policy > Internal Server.
b. Click Add in the Internal Server area.
c. On the page that appears, select GigabitEthernet0/1 for Interface.
d. Select the Assign IP Address option, and enter 202.38.1.1.
e. Select the first option for Global Port and enter 21.